Amazon Technologies, Inc.

Shuai Ye

Mark Edward Stalzer

Patrick Brigham Cullen

Kevin Christopher Miller

Aniket Deepak Divecha

Mingxue Zhao

John Robert Kerl

Rajat Banerjee

Nathan Andrew Miller

Po-Chun Chen

Upendra Bhalchandra Shevade

Joseph Elmar Magerramov

Kirk Arlo Petersen

Ethan Joseph Torretta

Matthew B Barr

Mohamed Nader Farahat Hassan

Shuguang Wang

Mathew Lehwess

Young Ha Jung

Haider Witwit

Aarthi Raju

Akshay Choudhry

Methods and apparatus for partitioned private interconnects to provider networks are described. At least a portion of available bandwidth of a private physical interconnect between a provider network and a connectivity intermediary's network is designated as the bandwidth limit of an interconnect partition set up on behalf of a customer at the request of the intermediary. The intermediary's network comprises one or more devices to which at least one of the customer's devices is connected. Access to one or more resources of the provider network via the interconnect is enabled. Traffic monitoring results associated with the interconnect are used to enforce the designated bandwidth limit of the partition.

Partitioned private interconnects to provider networks

Route tables may be associated with ingress traffic for logically isolated networks. A routing device at the edge of a logically isolated network may receive a route to include in a route table that is associated with ingress traffic to the logically isolated network, where the ingress traffic is destined for a block of public or private IP addresses. The route instructs the edge routing device to forward such ingress traffic to a network interface of a network appliance hosted in the logically isolated network. Network packets received at the edge routing device may have a destination of one or more public or private IP addresses in the block of public/private IP addresses. The edge routing device may identify the route in the route table that forwards the ingress network traffic destined for the block of public or private IP addresses to the network interface for the network appliance.

Routing ingress traffic for logically isolated networks destined for IP blocks without any network address translation

Computing resource service providers may provide computing resources to customers in a multi-tenant environment. These computing resources may be behind a firewall or other security device such that certain information does not reach the computing resources provided to the customer. A logging entity may be implemented on computer server operated by the computing resource service provider. The logging entity may obtain log information from the firewall or other security device and store the log information such that it is accessible to the customer. Additionally, the log information may be provided to other services such as a metrics service or intrusion detection service.

Networking flow logs for multi-tenant environments

Time-based groupings of network traffic flow data for virtualized computing resources are stored. Notifications that the time-based groupings are stored are sent, and in response to the notifications, the groupings are processed in accordance with the notifications. Network traffic flow data that is associated with users who have requested publication is published for associated virtualized computing resources.

Event-driven framework for filtering and processing network flows

In a provider network, data indicative of an operational state of the computing devices of the provider network is processed by an inference engine. The inference engine is configured to model operational characteristics of the computing devices of the provider network. The inference engine determines a potential fault condition for one of the computing devices of the provider network. A remedial action is invoked.

Model-based network management

An overlay network can be extended to edge routers for a substrate network. A request to make an overlay network available may be received at a network manager for a substrate network. The network manager may update an edge router to add an overlay network route to the edge router. The edge router can then indicate that the network route is available for handling network traffic. When network traffic directed to the overlay network is received at the network route, the edge router can forward the network traffic to the overlay network according to the added network route.

Extending overlay networks to edge routers of a substrate network

Methods and apparatus for pre-configured virtual gateways for isolated virtual networks are described. An isolated virtual network (IVN) is configured at a provider network on behalf of a customer. The IVN includes one or more devices whose network addresses are not accessible from the public Internet. In response to a request from a connectivity intermediary, a virtual private gateway (VPG) is established, configurable to enable connectivity between IVNs of the provider network and devices outside the provider network. The VPG is included within a set of candidate VPGs indicated programmatically to the customer. Connectivity is established between the customer's IVN and an external device via the VPG.

Pre-configured virtual gateways for isolated virtual networks

A provider network may collect diagnostic metrics for virtual connections implemented over physical connections to resources in the provider network. Diagnostic metric collection may be enabled via an interface for the provider network. In response to receiving a request to enable diagnostic metric collection for a particular virtual connection, a diagnostic agent within the provider network may begin sending diagnostic request messages to a client-side endpoint via the particular virtual connection. Responses to the request messages may be received back at the diagnostic agent. The diagnostic responses may then be used to generate diagnostic metrics for the particular virtual connection, which may be provided through the provider network interface.

Growing community of inventors

Herndon, VA, United States of America

Shuai Ye